Open source • End-to-end encrypted • Self-hostable
📱 Download • 💻 Self-Host • Why Guardyn? • Contribute
Guardyn is a private messaging app with military-grade encryption. Unlike other messengers:
- ✅ Always encrypted — your messages can't be read by anyone, not even us
- ✅ Open source — you can verify everything we claim
- ✅ Self-hostable — run your own server if you want complete control
- ✅ Post-quantum ready — protected against future quantum computer attacks
| Platform | Status | Download |
|---|---|---|
| 📱 Android | ✅ Ready | Coming to Play Store Q1 2026 |
| 📱 iOS | ✅ Ready | Coming to App Store Q1 2026 |
| 🖥️ Windows | ✅ Ready | GitHub Releases |
| 🖥️ macOS | ✅ Ready | GitHub Releases |
| 🖥️ Linux | ✅ Ready | GitHub Releases |
Early Access: We're in beta! Download from GitHub Releases and join the privacy rebellion.
Option 1: Use our hosted server (coming Q2 2026)
- Just download the app and sign up — we handle everything
Option 2: Self-host your own server
- Complete control over your data
- See Self-Host Guide below
Want to run your own Guardyn server? It's easy!
- Docker — Install Docker
- 8GB RAM minimum
# Clone the repository
git clone https://github.com/guardyn/guardyn.git
cd guardyn
# Start all services
docker compose -f docker-compose.dev.yml up -d
# Check status
docker compose -f docker-compose.dev.yml psThat's it! 🎉 Your server is running at localhost:8080.
We provide a Justfile with all common commands:
# Install Just: cargo install just (or brew install just)
just dc-up # Start all services
just dc-down # Stop all services
just dc-logs # View logs
just dc-ps # Check status
just dc-reset # Reset all data| Guide | Description |
|---|---|
| Developer Quick Start | Full development setup |
| Docker Dev Guide | Docker Compose details |
| Production Deployment | Kubernetes for production |
| Contributing | How to contribute |
| App | E2EE Always? | Open Source? | Self-Host? | Problem |
|---|---|---|---|---|
| Telegram | ❌ | ❌ | ❌ | Chats readable by servers |
| ✅ | ❌ | ❌ | Metadata goes to Meta | |
| Slack/Teams | ❌ | ❌ | ❌ | No E2EE, enterprise only |
| Signal | ✅ | ✅* | ❌ | Can't self-host |
| Guardyn | ✅ | ✅ | ✅ | — |
*Signal's server is mostly open source but not designed for self-hosting.
For Everyone:
- 🔐 Messages encrypted before they leave your device
- 👁️ Zero-knowledge: we can't read your messages
- 📱 Native apps for all platforms
For Organizations:
- 🏢 Self-host for complete data sovereignty
- 🔑 LDAP/SAML integration (coming v1.2)
- 📊 Compliance-ready (GDPR, HIPAA)
For Developers:
- 🛠️ 100% open source (Apache-2.0)
- ⚡ 30-second local setup
- 📚 Comprehensive documentation
| Layer | Technology | Why |
|---|---|---|
| 1-on-1 Chat | Signal Protocol (Double Ratchet) | Battle-tested, billions of users |
| Group Chat | OpenMLS (IETF RFC 9420) | Modern standard, scalable |
| Key Exchange | PQXDH (X3DH + ML-KEM) | Post-quantum resistant |
| Voice/Video | WebRTC + SFrame | E2EE media streaming |
| Metadata | Sealed Sender | Hides who sent the message |
- ✅ End-to-end encryption — Always on, can't be disabled
- ✅ Perfect Forward Secrecy — Past messages safe if keys compromised
- ✅ Post-Quantum Ready — Protected against quantum computers
- ✅ Metadata Protection — Sealed Sender hides sender identity
- ✅ Hardware Keys — iOS Secure Enclave, Android KeyStore
⚠️ If your device is compromised, encryption can't help⚠️ Recipients can take screenshots⚠️ ISPs see IP addresses (use Tor/VPN for anonymity)
- ✅ Internal security review completed
- ✅ Penetration testing infrastructure deployed
- 📋 External audit (Cure53) scheduled Q2 2026
- ✅ 1-on-1 and group chat (E2EE)
- ✅ Voice messages
- ✅ Message reactions, replies, edit, delete
- ✅ Disappearing messages
- ✅ Read receipts and typing indicators
- ✅ Voice and video calls (1-on-1, E2EE)
- ✅ Screen sharing (desktop)
- 📋 Group calls (coming v1.1)
- ✅ Photos, videos, files (encrypted)
- ✅ Media gallery
- ✅ iOS, Android (Flutter)
- ✅ Windows, macOS, Linux (Tauri)
- ✅ Push notifications (FCM, APNs)
- ✅ Offline support
┌────────────────────────────────────────────────────────────────┐
│ YOUR DEVICES │
├────────────────────────────────────────────────────────────────┤
│ 📱 Mobile (Flutter) 🖥️ Desktop (Tauri) │
│ iOS • Android Windows • macOS • Linux │
└──────────────────────────┬─────────────────────────────────────┘
│
🔐 guardyn-crypto (Rust)
All encryption happens HERE
on YOUR device
│
▼
┌────────────────────────────────────────────────────────────────┐
│ GUARDYN SERVER │
│ (Can self-host or use our cloud) │
├────────────────────────────────────────────────────────────────┤
│ 🔑 Auth 💬 Messaging 👥 Presence │
│ 📁 Media 📞 Calls 🔔 Notifications │
├────────────────────────────────────────────────────────────────┤
│ TiKV • ScyllaDB • Redpanda (Data Layer) │
└────────────────────────────────────────────────────────────────┘
│
Server CANNOT read
your messages! 🔒
Key Point: All encryption/decryption happens on YOUR device. The server only sees encrypted blobs.
- All backend services (Auth, Messaging, Presence, Media, Call, Notifications)
- Full cryptography stack (PQXDH, Double Ratchet, OpenMLS, SFrame)
- Mobile apps (iOS, Android)
- Desktop apps (Windows, macOS, Linux)
- Voice/video calls (1-on-1)
- Production infrastructure (Kubernetes, observability)
- 57 technical debt items resolved (228 hours of work)
- External security audit (Cure53)
- App Store / Play Store submission
- Public beta launch
- Group calls (LiveKit SFU)
- Managed cloud hosting (SaaS)
- Enterprise features (LDAP, SAML)
- v1.0 general availability
We respect Signal — they pioneered secure messaging. Here's how we differ:
| Feature | Signal | Guardyn |
|---|---|---|
| 1-on-1 E2EE | ✅ Double Ratchet | ✅ Double Ratchet (same) |
| Group E2EE | ✅ Sender Keys | ✅ OpenMLS (newer standard) |
| Post-Quantum | 🚧 In development | ✅ PQXDH implemented |
| Self-Hosting | ❌ | ✅ Full support |
| 100% Open Source | ✅ Everything | |
| Track Record | ✅ 10+ years | |
| Audit Status | ✅ Multiple audits | 📋 Planned Q2 2026 |
Bottom Line:
- Use Signal if you want maximum proven trust
- Use Guardyn if you need self-hosting or want 100% open source
100% Apache-2.0. No dual licensing, no "Enterprise Edition" tricks.
Self-host anywhere. Modify freely. Contribute back if you want.
We need your help! See CONTRIBUTING.md for:
- ⚡ 5-minute quick start
- 🎯 Good first issues
- 🛠️ Development workflow
- 💡 Ways to contribute (code, docs, testing, spreading the word)
- Website: guardyn.co
- GitHub: github.com/guardyn/guardyn
- Security: [email protected] (vulnerabilities only)
- General: [email protected]
The Privacy Rebellion Starts Now 🛡️
Built with ❤️ by privacy advocates
Apache-2.0 • Copyright © 2025-2026 Guardyn Team
